Tag Archives: libpeconv

Unpacking a malware with libPeConv (Pykspa case study)

Posted on January 29, 2018 by hasherezade

In one of the recent episodes of “Open Analysis Live!” Sergei demonstrated how to statically unpack the Pykspa Malware using a Python script. If you haven’t seen this video yet, I recommend you to watch, it is available here – … Continue reading →

Posted in Malware, Programming, Tutorial | Tagged | Leave a comment

Hook the planet! Solving FlareOn4 Challenge6 with libPeConv

Posted on December 1, 2017 by hasherezade

Recently I started making a small library for loading and manipulating PE files (libpeconv – it’s open source, available on my GitHub). In my previous post, I demonstrated how the Challenge 3 from FlareOn4 could be solved with it’s help: … Continue reading →

Posted in CrackMe, Programming, Tools | Tagged , , , | Leave a comment

Import all the things! Solving FlareOn4 Challenge 3 with libPeConv

Posted on November 24, 2017 by hasherezade

Recently I started making a small library for loading and converting PE files (libpeconv, available on my GitHub). The library is still on early stages of development, so please don’t judge and don’t use it in any serious projects. The … Continue reading →

Posted in CrackMe, Programming, Tools | Tagged , , , | 3 Comments

Introducing PE_unmapper

Posted on December 2, 2016 by hasherezade

Recently I wrote a small tool, that can be used as a helper in malware analysis. Various malware types unpack their core modules in memory, load them and run. In order to unpack them fast, we can let the malware … Continue reading →

Posted in Malware, Tools, Tutorial | Tagged , | 1 Comment